This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6N4amCURduvyuvVRr9Ynf02clr8.roa File: 6N4amCURduvyuvVRr9Ynf02clr8.roa (raw, json) Hash identifier: AxpEUXQwUP7SZm5XCO3tNOVK5giACLssqpIMImL+roo= Subject key identifier: E8:DE:1A:98:25:11:76:EB:F2:BA:F5:51:AF:D6:27:7F:4D:9C:96:BF Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39673355A39D85EAFBBF3CF6604D2F Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6N4amCURduvyuvVRr9Ynf02clr8.roa Signing time: Fri 02 Jan 2026 10:20:49 +0000 ROA not before: Fri 02 Jan 2026 10:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213920 IP address blocks: 2a0c:b641:30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:67:33:55:a3:9d:85:ea:fb:bf:3c:f6:60:4d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8de1a98251176ebf2baf551afd6277f4d9c96bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:55:ae:b8:77:59:ed:82:54:8a:df:3f:4d: f4:76:c3:b0:ed:9c:04:66:7f:9d:82:b7:6d:25:28: aa:c1:b4:8c:d7:61:c4:f1:c0:2c:d3:67:2d:c7:f3: 27:7f:4e:58:36:e1:ba:12:99:6c:37:09:47:44:f9: cc:dc:03:22:53:ce:0d:0d:ba:99:02:ed:b2:48:de: 74:6a:78:db:e8:52:22:f4:30:75:35:5d:da:35:37: 4b:78:a3:b8:9a:2a:72:9d:42:55:7a:a7:f6:a4:90: 3a:8e:60:ac:54:06:bd:c7:74:4a:1d:a7:3e:fd:59: 2b:18:ae:97:ad:d3:cd:bf:04:9c:fd:4f:3b:4e:87: 23:4b:94:03:65:34:ea:cc:bc:67:17:cd:4e:c1:20: 47:ff:e0:48:7b:cb:f2:2b:96:6e:75:6b:2d:70:87: f8:2b:dc:12:9b:ed:0f:ff:bc:ca:c3:d6:e0:6d:37: 52:49:15:4b:57:14:3e:86:d2:02:62:43:39:77:d3: 24:f8:81:92:b5:78:ce:b1:62:7b:59:88:66:7e:7c: ee:3b:b0:e1:2c:db:89:f1:55:a4:87:82:9a:6b:09: 8b:91:84:51:f7:f3:c1:1a:a3:97:67:2b:19:26:45: 23:72:b9:af:0f:56:69:4e:d6:0a:84:e6:42:18:ea: 06:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DE:1A:98:25:11:76:EB:F2:BA:F5:51:AF:D6:27:7F:4D:9C:96:BF X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6N4amCURduvyuvVRr9Ynf02clr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:30::/44 Signature Algorithm: sha256WithRSAEncryption 56:9a:02:71:0e:b3:c6:10:a1:7f:01:46:0a:4d:2c:b2:bc:04: 72:40:82:59:ee:3b:c9:c9:b7:d6:28:70:c1:6d:ee:92:a2:72: 79:76:82:3d:75:47:b2:f4:64:f0:6d:c1:9b:b6:33:da:95:79: 38:52:d7:6d:57:bb:20:48:e7:9c:db:fe:09:78:ec:3c:10:4c: 4f:01:59:44:ff:2a:e1:e5:6e:51:97:6e:92:66:e0:1e:4d:26: 19:d4:7b:41:62:78:42:f6:c6:e5:c0:87:3a:f3:97:25:96:5c: f4:b4:68:bb:ff:37:56:9d:49:81:de:9f:8d:92:08:ad:9c:1f: 14:ae:b3:22:37:c1:32:6b:61:81:ab:90:52:d5:ff:fe:76:57: 48:6d:87:5e:e3:c6:e2:59:53:85:c8:35:ab:23:85:ca:18:9c: 64:f2:65:2c:f9:39:6e:d8:3b:42:8c:f2:47:cb:5f:25:b3:6d: 50:3b:e2:6e:f9:5a:ef:43:dd:1f:c1:a6:ba:b1:fb:c4:73:b3: 30:71:4d:3e:46:8e:d6:44:2c:f8:2f:1f:ef:a4:e5:bc:58:ae: b9:b2:6b:fe:cc:13:9e:95:6e:de:ce:a8:dc:2d:4c:95:9c:5f: 95:10:10:64:7d:ef:1b:91:59:9e:c9:ec:9b:43:30:e7:f2:01: 9d:16:b9:06 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWczVaOdher7vzz2YE0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGRlMWE5ODI1MTE3NmViZjJiYWY1NTFhZmQ2Mjc3ZjRkOWM5NmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk1Vrrh3We2CVIrfP030dsOw7ZwE Zn+dgrdtJSiqwbSM12HE8cAs02ctx/Mnf05YNuG6EplsNwlHRPnM3AMiU84NDbqZ Au2ySN50anjb6FIi9DB1NV3aNTdLeKO4mipynUJVeqf2pJA6jmCsVAa9x3RKHac+ /VkrGK6XrdPNvwSc/U87TocjS5QDZTTqzLxnF81OwSBH/+BIe8vyK5ZudWstcIf4 K9wSm+0P/7zKw9bgbTdSSRVLVxQ+htICYkM5d9Mk+IGStXjOsWJ7WYhmfnzuO7Dh LNuJ8VWkh4KaawmLkYRR9/PBGqOXZysZJkUjcrmvD1ZpTtYKhOZCGOoGeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOjeGpglEXbr8rr1Ua/WJ39NnJa/MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvNk40YW1DVVJkdXZ5dXZWUnI5WW5mMDJjbHI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQAw MA0GCSqGSIb3DQEBCwUAA4IBAQBWmgJxDrPGEKF/AUYKTSyyvARyQIJZ7jvJybfW KHDBbe6SonJ5doI9dUey9GTwbcGbtjPalXk4UtdtV7sgSOec2/4JeOw8EExPAVlE /yrh5W5Rl26SZuAeTSYZ1HtBYnhC9sblwIc685clllz0tGi7/zdWnUmB3p+Nkgit nB8UrrMiN8Eya2GBq5BS1f/+dldIbYde48biWVOFyDWrI4XKGJxk8mUs+Tlu2DtC jPJHy18ls21QO+Ju+VrvQ90fwaa6sfvEc7MwcU0+Ro7WRCz4Lx/vpOW8WK65smv+ zBOelW7ezqjcLUyVnF+VEBBkfe8bkVmeyeybQzDn8gGdFrkG -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:35 2026 by rpki-client